[pull] main from sigstore:main#44

Open

pull[bot] wants to merge 165 commits intoReality2byte:mainfrom

Commits on Aug 4, 2025

Verify subject with bundle only when checking claims (#4320)
haydentherapper
authored

Commits on Aug 8, 2025

Commits on Aug 12, 2025

chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#4338)
dependabot[bot]
authored
chore(deps): bump the actions group with 3 updates (#4345)
dependabot[bot]
authored
chore(deps): bump github.com/sigstore/sigstore-go (#4340)
dependabot[bot]
authored
chore(deps): bump the gomod group with 4 updates (#4343)
dependabot[bot]
authored
chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.41.0 (#4339)
dependabot[bot]
authored
chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.2 (#4341)
dependabot[bot]
authored

Commits on Aug 13, 2025

Fixes to cosign sign / verify for the new bundle format (#4346)
steiza
authored

Commits on Aug 14, 2025

Don't require timestamps when verifying with a key (#4337)
haydentherapper
authored

Commits on Aug 18, 2025

Don't load content from TUF if trusted root path is specified (#4347)
steiza
authored

Commits on Aug 21, 2025

chore(deps): bump github.com/go-viper/mapstructure/v2 (#4355)
dependabot[bot]
authored

Commits on Aug 26, 2025

Commits on Aug 27, 2025

Commits on Aug 28, 2025

Break import cycle with e2e build tag (#4370)
haydentherapper
authored

Commits on Aug 29, 2025

refactor: extract function to write referrer attestations (#4357)
arewm
authored

Commits on Sep 2, 2025

Commits on Sep 3, 2025

Commits on Sep 4, 2025

Commits on Sep 8, 2025

Commits on Sep 9, 2025

chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 (#4391)
dependabot[bot]
authored

Commits on Sep 11, 2025

Commits on Sep 12, 2025

Commits on Sep 17, 2025

Bump sigstore-go for more precise user agents (#4413)
haydentherapper
authored

Commits on Sep 18, 2025

bump go builder to use 1.25.1 and cosign (#4417)
cpanato
authored

Commits on Sep 25, 2025

Partially populate the output of cosign verify when working with new bundles (#4416)
steiza
authored

Commits on Sep 26, 2025

Commits on Sep 30, 2025

Commits on Oct 2, 2025

Create changelog for v2.6.1 (#4439)
haydentherapper
authored

Commits on Oct 9, 2025

Update rekor-tiles version path
cmurphy
committed

Commits on Oct 10, 2025

Commits on Oct 13, 2025

Commits on Oct 15, 2025

chore(deps): bump the actions group with 2 updates (#4460)
dependabot[bot]
authored

Commits on Oct 16, 2025

Remove --out flag from `cosign initialize` (#4462)
apyrgio
authored

Commits on Oct 17, 2025

update go to 1.25.3 (#4471)
cpanato
authored

Commits on Oct 18, 2025

Use overridden repository for new bundle format (#4473)
cmurphy
authored

Commits on Oct 21, 2025

Commits on Oct 22, 2025

Commits on Oct 24, 2025

Commits on Oct 27, 2025

Pass insecure registry flags through to referrers
cmurphy
committed

Commits on Oct 29, 2025

Commits on Nov 3, 2025

Add --signing-algorithm flag (#3497)
ret2libc
authored

Commits on Nov 4, 2025

Commits on Nov 12, 2025

Commits on Nov 14, 2025

Commits on Nov 15, 2025

chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
dependabot[bot]
authored

Commits on Nov 17, 2025

update go builder and cosign (#4529)
cpanato
authored

Commits on Nov 20, 2025

Commits on Nov 24, 2025

Commits on Nov 25, 2025

Protobuf bundle support for subcommands `save` and `load` (#4538)
steiza
authored

Commits on Dec 2, 2025

Bump sigstore library dependencies (#4532)
haydentherapper
authored

Commits on Dec 3, 2025

Updating sign-blob to also support signing with a certificate (#4547)
steiza
authored

Commits on Dec 4, 2025

update slack invite link (#4560)
frewilhelm
authored

Commits on Dec 5, 2025

Commits on Dec 8, 2025

Commits on Dec 10, 2025

Add changelog for v3.0.3 (#4572)
haydentherapper
authored

Commits on Dec 29, 2025